pptx
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute external binaries for document processing tasks. These includesoffice(LibreOffice) for PDF conversion and validation,pdftoppm(Poppler) for thumbnail generation, andgitfor XML content comparison. These are legitimate uses of platform tools to achieve the skill's primary purpose. - [EXTERNAL_DOWNLOADS]: The skill documentation outlines dependencies on several well-known and trusted packages from official registries, such as
markitdown,pptxgenjs,playwright, andsharp. - [SAFE_PRACTICE]: The skill uses
defusedxmlfor XML parsing in several scripts, which provides protection against XML external entity (XXE) attacks.
Audit Metadata